$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/7bc92fef-7d06-3b35-9040-ddc10698a56d.roa File: 7bc92fef-7d06-3b35-9040-ddc10698a56d.roa (raw, json) Hash identifier: fNanFSsZNOsXthMPJ2oZfs4wdIuewlRElWs+8HuAtFQ= Subject key identifier: 39:69:ED:E8:FC:1D:14:DF:47:B0:49:18:B3:85:16:B8:E4:5F:3E:9F Certificate issuer: /CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Certificate serial: 010D0C9F4328584EB57C5F36AECEDFE73163C500 Authority key identifier: CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/7bc92fef-7d06-3b35-9040-ddc10698a56d.roa Signing time: Mon 03 Aug 2026 01:00:11 +0000 ROA not before: Mon 03 Aug 2026 01:00:11 +0000 ROA not after: Sun 01 Nov 2026 01:00:11 +0000 asID: 6079 IP address blocks: 144.208.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b5:7c:5f:36:ae:ce:df:e7:31:63:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Validity Not Before: Aug 3 01:00:11 2026 GMT Not After : Nov 1 01:00:11 2026 GMT Subject: CN=f0b125f4-b7db-45ca-8916-2bab13e07c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:22:ff:ac:ea:e5:af:df:c7:b0:ae:bb:f3:c4: 90:ae:fb:e1:60:bc:63:f8:92:35:8d:82:e3:76:bb: 21:80:77:f0:a2:c2:41:52:a8:99:d8:b9:53:36:86: c3:e7:ae:05:bd:dd:59:71:19:d5:da:44:72:be:dd: 6f:5d:c6:4c:20:22:d4:a8:dd:0a:05:3c:35:ae:9a: a2:f1:94:2a:ff:43:85:e8:41:cc:3e:b8:d6:d2:f3: e3:e5:78:43:29:f9:7c:c4:72:b8:83:de:bd:42:3d: ce:37:01:36:99:29:77:92:58:8a:19:40:f1:d7:e8: e4:d7:5e:11:e4:00:4b:29:28:ca:bc:33:16:5e:c8: c7:c2:bd:f4:a9:60:23:fe:90:d5:15:8e:e5:05:a7: 9c:d2:36:ad:cf:5e:89:89:f6:df:8c:5f:04:d7:9c: 4c:2e:a2:75:34:95:f3:6d:ab:f4:d1:e5:39:4b:eb: 39:cd:99:60:6b:ea:e7:10:37:8e:86:22:1c:da:52: a8:6d:e0:1b:7d:18:09:bc:8b:60:87:7a:f6:f7:b8: 63:5c:ca:fb:10:db:6f:ae:5b:63:c3:b6:63:d9:40: 28:a9:96:15:53:d2:27:dd:52:7c:1e:51:87:04:e0: f7:f3:e2:b3:90:e0:71:f1:1c:86:c5:76:b0:17:2a: b0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:69:ED:E8:FC:1D:14:DF:47:B0:49:18:B3:85:16:B8:E4:5F:3E:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/7bc92fef-7d06-3b35-9040-ddc10698a56d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl X509v3 Authority Key Identifier: keyid:CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer sbgp-ipAddrBlock: critical IPv4: 144.208.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:19:f3:99:ae:83:8f:15:bd:69:f8:e7:d2:0e:3a:50:29:57: 6c:52:fa:e1:38:2b:d3:3b:ac:c1:6a:e1:44:d5:1f:c8:b6:03: 4c:1b:db:73:2c:d1:a0:e4:4c:da:62:99:ed:0f:4a:a2:c7:33: 98:85:d6:d3:25:9e:a4:70:5b:91:e8:3f:39:4c:4c:80:a1:68: 95:d6:c0:ec:66:8d:a5:4f:d4:d8:fa:5e:05:25:09:1e:20:5a: 89:22:0e:f1:3c:3e:8f:c4:c0:d2:ff:68:2a:fa:c8:59:df:26: a9:6f:a3:2c:8b:77:6e:16:54:10:1b:b7:d1:db:f3:4a:9b:3a: 49:76:47:70:f9:b7:f0:07:11:f7:9a:66:51:8e:70:c3:37:00: 6f:3c:88:f0:5b:f0:e7:1c:e2:79:18:bd:19:2a:69:3f:f9:32: 26:8b:a2:5c:b4:5b:81:43:12:ed:49:94:fa:7f:1b:0e:a0:c2: d0:d6:92:37:60:e6:32:f6:b9:42:d1:a2:c9:18:69:06:5e:09: db:ae:77:27:fb:db:4b:b6:48:37:61:78:56:60:f0:53:25:87: f4:4a:bb:4e:5f:ac:68:c6:db:10:8e:22:09:73:e4:eb:30:97: 15:1d:6e:22:87:dc:f8:f3:47:4c:24:c7:4c:bd:be:bc:b0:10: 01:2f:ff:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE61fF82rs7f5zFjxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmJiOTAzYTItNGM4My00YmZhLTk1NzItMzZmYmFmYjg0 YTIzMB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk ZjBiMTI1ZjQtYjdkYi00NWNhLTg5MTYtMmJhYjEzZTA3YzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9SL/rOrlr9/HsK6788SQrvvhYLxj+JI1jYLj drshgHfwosJBUqiZ2LlTNobD564Fvd1ZcRnV2kRyvt1vXcZMICLUqN0KBTw1rpqi 8ZQq/0OF6EHMPrjW0vPj5XhDKfl8xHK4g969Qj3ONwE2mSl3kliKGUDx1+jk114R 5ABLKSjKvDMWXsjHwr30qWAj/pDVFY7lBaec0jatz16JifbfjF8E15xMLqJ1NJXz bav00eU5S+s5zZlga+rnEDeOhiIc2lKobeAbfRgJvItgh3r297hjXMr7ENtvrltj w7Zj2UAoqZYVU9In3VJ8HlGHBOD38+KzkOBx8RyGxXawFyqwEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlp7ej8HRTfR7BJGLOFFrjkXz6fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5 MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZiYWZiODRhMjMvN2JjOTJmZWYtN2QwNi0z YjM1LTkwNDAtZGRjMTA2OThhNTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZmJiOTAzYTItNGM4My00YmZhLTk1 NzItMzZmYmFmYjg0YTIzL2ZiYjkwM2EyLTRjODMtNGJmYS05NTcyLTM2ZmJhZmI4 NGEyMy5jcmwwHwYDVR0jBBgwFoAUzusqfornrD1acybne0mkRJaEkYowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZi YWZiODRhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkNB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEZ85mug48VvWn459IOOlApV2xS+uE4K9M7rMFq4UTVH8i2A0wb23Ms 0aDkTNpime0PSqLHM5iF1tMlnqRwW5HoPzlMTIChaJXWwOxmjaVP1Nj6XgUlCR4g WokiDvE8Po/EwNL/aCr6yFnfJqlvoyyLd24WVBAbt9Hb80qbOkl2R3D5t/AHEfea ZlGOcMM3AG88iPBb8Occ4nkYvRkqaT/5MiaLoly0W4FDEu1JlPp/Gw6gwtDWkjdg 5jL2uULRoskYaQZeCduudyf720u2SDdheFZg8FMlh/RKu05frGjG2xCOIglz5Osw lxUdbiKH3PjzR0wkx0y9vrywEAEv/1s= -----END CERTIFICATE-----Generated at Fri Aug 28 18:35:03 2026 by rpki-client